Fake E-Challan APK Scam on the Rise in Bhubaneswar; Police Issue Alert
Bhubaneswar: Cyber fraud cases linked to fake e-challan messages are steadily increasing in the city, with scammers using malicious APK files to trap unsuspecting mobile users. These fraudulent messages, often sent via SMS or WhatsApp, claim that a traffic violation has been recorded and urge recipients to download an attached link to view or pay the challan.
According to cybercrime officials, the links redirect users to a fake application designed to look like an official transport or traffic police platform. Once installed, the APK gains access to sensitive information such as bank details, OTPs, contacts, and personal data, enabling fraudsters to siphon money from victims’ accounts without their knowledge.
Police sources said several complaints have been registered in recent weeks, with victims reporting unauthorized bank transactions shortly after installing the fake application. In many cases, the fraudsters use fear tactics, warning of heavy penalties or license suspension to pressure users into clicking the link quickly.
The Bhubaneswar cybercrime unit has advised citizens to remain vigilant and verify any traffic challan through official government portals such as the Parivahan website or authorized mobile applications. Officials have also reiterated that government departments never send challans through APK files or unknown links.
Residents have been urged not to download apps from unverified sources and to avoid clicking on suspicious links, even if the message appears authentic. Anyone who suspects fraud or receives such messages is encouraged to report the matter immediately to the cybercrime helpline or the nearest police station.
Authorities continue to monitor the situation and are working to trace the source of the scam, while awareness campaigns are being planned to educate the public about rising digital fraud threats.
Cyber experts have pointed out that APK-based scams are becoming increasingly common because Android devices allow installations from external sources if permissions are enabled. Fraudsters exploit this loophole by disguising malware as official-looking e-challan applications, complete with government logos, reference numbers, and fake payment gateways.
Once installed, the malicious APK often runs silently in the background, forwarding SMS messages, capturing keystrokes, and intercepting OTPs used for banking transactions. In several reported cases, victims realized something was wrong only after money had already been debited from their accounts.
Officials have clarified that legitimate traffic challans are issued only through verified platforms, including the Parivahan website, state transport portals, or official SMS notifications that do not require app downloads. Any message demanding immediate payment through a downloaded file should be treated as suspicious.
The cybercrime cell has urged users to keep their mobile operating systems updated, disable installation from unknown sources, and use trusted antivirus software to detect malicious activity. Banks have also advised customers to immediately block their accounts and contact customer support if they suspect unauthorized access.
To strengthen public awareness, Bhubaneswar police plan to collaborate with resident welfare associations, educational institutions, and local media to spread information about cyber safety. Authorities have emphasized that timely reporting of such incidents can help track fraud networks and prevent further victims.
Citizens can report cybercrime incidents by calling the national cybercrime helpline1930or registering a complaint on the official cybercrime reporting portal.

Suggested Video